This guide draws on insights originally shared by attorney Puja Amin (Partner, Troutman Amin, LLP) and TCPA expert Tammy Glover Fowler (Legal & Compliance Director, Contact Center Compliance) during ActiveProspect’s FCC webinar series, and has been updated to reflect recent developments from the FCC on TCPA compliance.

TL;DR

  • The FCC’s TCPA revocation of consent rule makes it easier for consumers to revoke consent to robocalls and robotexts, and harder for businesses to ignore or delay honoring that request.
  • As of April 11, 2025, most of the rule is already enforceable: businesses must honor revocation through any “reasonable method” (including standardized keywords like “stop” and “revoke”), process requests within 10 business days, and disclose alternative opt-out options.
  • The “revoke-all” requirement, which treats a single “stop” as revoking consent for all future communications from that company, has been delayed twice. It’s now pushed to January 31, 2027.
  • Non-compliance is costly: TCPA violations carry statutory damages of $500-$1,500 per violation, plus real class action exposure.
  • Key action: Use tools like TrustedForm and LeadConduit to keep consent and revocation records audit-ready now, so you’re covered as the TCPA continues to evolve.

Overview

In February 2024, the FCC approved a significant update to the TCPA focused on expanding consumers’ ability to revoke consent to receive calls and texts. As Puja Amin put it during ActiveProspect’s webinar on the topic, “Everyone’s very focused on the 1 to 1 consent rules, which they should be and they ought to be. But these new revocation rules, they are just massive, and I’m not hearing enough folks talk about this and that’s scary.”

That warning has largely played out. Since April 11, 2025, the core of the rule has been in force:  the 10-business-day processing window, the standardized reasonable-methods keywords, and the disclosure requirements. The one piece still pending is the “revoke-all” requirement, which the FCC has now delayed twice, most recently to January 31, 2027. Below, we break down what’s required today for TCPA compliance, what’s still coming, and what it means for your compliance program.

An overview of the revocation of consent rule

The 10 business day window

A notable shift in the rule is the introduction of a 10 business day window for companies to process and honor a DNC request received from an individual. Previously, the timeframe within which a company had to comply with such requests wasn’t legally defined. This requirement has been in effect since April 11, 2025 — failure to adhere to it can prompt litigation for companies that lag, processing requests on the 11th business day or after.

As predicted by Puja, “a lot of folks aren’t gonna have that much difficulty.” She expects that many companies will find an easy solution for this — likely a simple adjustment in their communication and internal DNC system’s settings. The challenge, however, may arise when coordinating internal DNC requests across multiple channels, call centers, or with external partners.

According to Tammy, “in the day and age we’re in now, you can really do it in 10 business days.”

TCPA revocation of consent: “Stop” immediately response

The FCC’s rule establishes that a consumer’s use of the word “stop” (or a similar standardized keyword) in reply to a marketing message is definitive: no further calls or texts can be sent. This piece has been enforceable since April 11, 2025.

The more sweeping version of this idea, a “stop” reply to any message, including a purely informational one (revoking a company’s ability to contact that consumer for any purpose, even emergencies) is what’s known as the “revoke-all” rule. The FCC has delayed this specific requirement twice, most recently pushing its effective date to January 31, 2027. Until then, businesses aren’t yet legally required to treat a stop-reply to one message type as blanket revocation across every business unit and purpose, but it’s worth building toward, since that date isn’t far off.

Consumers can revoke consent with any reasonable mean

The revocation of consent rule outlines methods for withdrawing consent to text message communications. It established a standard set of words like “stop,” “revoke,” and “opt-out” that consumers can use, and this piece, like the 10-day window, has been in force since April 2025. The FCC also opened the door to other reasonable terms for opting out, though it stopped short of providing an exhaustive list.

It’s crucial for companies and service providers to interpret these signals intelligently or to collaborate with platforms capable of recognizing a variety of withdrawal requests.

The FCC’s decision to highlight a handful of terms, even though it refrained from specifying every acceptable word, should catch the attention of businesses that haven’t updated their compliance programs.

TCPA revocation of consent requires immediate change

Once a consumer revokes TCPA consent, companies are legally required to immediately stop all telemarketing and automated communications, including marketing texts, calls, and prerecorded messages. Here’s what companies need to do to ensure compliance:

  1. Cease communications immediately. As soon as a consumer revokes consent, the company must stop sending marketing texts or making automated calls to that consumer. Continuing to contact them can result in TCPA violations, which can carry significant fines, penalties, and litigation.
  2. Update internal records. Companies should promptly update their CRM or contact management systems to reflect the consumer’s revocation of consent. This prevents accidental future contacts and keeps records clear in case of an audit or legal dispute.
  3. Implement a real-time consent management system. A system that processes opt-outs and revocations in real time is essential to avoid delays. Automated systems should be designed to recognize and immediately act on any opt-out requests, particularly for text messages and automated calls.
  4. Acknowledge revocation, if appropriate. While not always necessary, acknowledging receipt of the revocation can reassure consumers that their request has been processed. For example, a final message might say, “You have been unsubscribed from further communications.”
  5. Train staff on TCPA compliance. Companies should regularly train employees on TCPA compliance, especially those involved in telemarketing, customer service, and CRM management, so they understand the importance of honoring consent revocations immediately.
  6. Maintain a do-not-contact list. Consumers who have revoked consent should be added to an internal do-not-contact list, ensuring they are excluded from future marketing campaigns. This is particularly important for companies that outsource marketing activities to third parties, as those vendors must also comply with revocation requests.

By immediately stopping marketing texts and automated calls after a TCPA revocation, companies not only comply with the law but also build trust and respect for consumer preferences. Accurate recordkeeping is central to compliance, whether tracking consent revocations or issuing digital pay stubs. Securely managing both helps ensure transparency and protects against legal risks.

The cost of non-compliance

Ignoring a revocation request is a direct TCPA violation, and the penalties add up fast. Each unwanted call or text made after a valid revocation can trigger statutory damages of $500 per violation, rising to as much as $1,500 if a court finds the violation willful or knowing. Because TCPA claims are frequently brought as class actions, a single overlooked opt-out in an automated system can multiply across thousands of contacts before anyone notices.

Beyond the legal exposure, you risk damaging trust between your business and consumers. Consumers who feel ignored after asking a company to stop contacting them are unlikely to give that company the benefit of the doubt again. Treating revocation as a real-time, auditable process, and not just a compliance checkbox, protects both your legal standing and your brand reputation.

The importance of a TCPA revoke consent disclosure

Providing a clear and conspicuous TCPA revoke consent disclosure is essential for businesses to comply with the TCPA and to maintain transparent communication with consumers.

This disclosure should inform consumers of their right to revoke consent for marketing communications and explain how they can do so. Here’s why it’s important:

  • Consumers should be able to revoke consent easily and by any reasonable means. A clear disclosure ensures that companies meet this requirement, reducing the risk of non-compliance, potential fines, and litigation.
  • When consumers know they have control over communications, they are more likely to feel respected and trust the company. Transparency around revocation options can improve brand reputation and customer loyalty.
  • Providing a clear revocation disclosure minimizes the likelihood of misunderstandings that could lead to complaints, lawsuits, or TCPA violations. This helps protect the company from costly legal consequences.

Key elements of a TCPA revoke consent disclosure

A well-crafted TCPA revoke consent disclosure should include the following information:

  1. Right to revoke: Clearly state that the consumer has the right to revoke their consent for receiving marketing communications at any time.
  2. Instructions on how to revoke: Provide simple, direct instructions on how consumers can opt out, including a variety of methods (e.g., replying “STOP” to a text message, calling a customer service number, or filling out an online form). Multiple options ensure it’s accessible and easy for consumers.
  3. Immediate cessation of communications: Assure the consumer that revocation will result in the immediate cessation of all marketing texts, automated calls, and any other forms of communication under the TCPA.
  4. Contact information: Include the company’s contact details (like a phone number or email address) for any questions about the revocation process, helping to further clarify the process and make it more convenient.
  5. Confirmation of revocation (optional but recommended): Let consumers know they will receive a confirmation once their revocation request is processed. This reinforces transparency and can increase consumer confidence in the process.

By providing a clear and conspicuous TCPA revoke consent disclosure, companies empower consumers to manage their communications, reduce the risk of non-compliance, and demonstrate a commitment to consumer rights and transparency.

How to revoke TCPA consent

Consumers have the right to revoke prior express consent to receive telemarketing calls or texts at any time, using a reasonable method. Here’s a summary of the main acceptable methods to revoke TCPA consent.

Verbally (over the phone)

A consumer can simply tell a representative during a phone call that they no longer wish to be contacted. This is valid and must be honored.

Text message

Replying to a marketing text with standard keywords like “STOP,” “UNSUBSCRIBE,” or similar clear opt-out language is an acceptable revocation method.

Email

Sending an email to the business stating they wish to revoke consent is valid. The business must treat this as an opt-out request.

Written notice (letter or form)

A mailed letter or completion of a web form indicating revocation of consent is also acceptable under the TCPA.

Any other reasonable method

As clarified by the FCC, any clear and reasonable method – even if not formally provided by the business – is considered valid. If the intent to revoke is clear, it must be honored.

The implications of revoked TCPA consent requests for companies

Companies now face the imperative to rethink how “stop” opt-out notifications are crafted. They’ll need to clarify, and likely get creative, about what exactly a “stop” message opts consumers out from. It’s a delicate balance to maintain, ensuring compliance while still meeting customers’ needs and expectations.

The FCC’s rule also permits a one-time follow-up text for clarification, with a five-minute window for the consumer to respond. Once the revoke-all provision takes effect on January 31, 2027, an unanswered clarification text will default to a full opt-out. This is worth designing toward now, even though it isn’t yet a legal requirement.

Lastly, for entities utilizing messaging capabilities without direct reply functions, disclosure on alternative opt-out methods is now essential, whether it’s a web link or instructions for a different communication channel.

Things to look out for regarding TCPA revoke consent requests

Many of us unwittingly agree to receive communications from our bank – for example – when we share our contact details. This is known as express consent. However, it’s essential to understand that there’s a distinction between express consent – granted tacitly – and express written consent, which is given more deliberately. With the integration of opt-out options in informational messages, it’s crucial to stay vigilant.

Following the previous example: as a consumer, you wouldn’t want to miss out on important fraud alerts simply because you opted out without a second thought. It pays to be judicious about the alerts you choose to receive.

If you’d like to refresh your memory on the difference between express consent and express written consent, take a look at this blog post.

When is the TCPA revocation of consent rule expected to be enforced?

Most of the FCC’s 2024 revocation of consent order has been enforceable since April 11, 2025, including:

  • Honoring revocation via any reasonable method, including the FCC’s standardized keywords (stop, quit, cancel, unsubscribe, revoke, opt out, end)
  • Processing DNC and revocation requests within 10 business days
  • Disclosing alternative opt-out methods when a texting platform doesn’t support direct replies as a free pass.

The one piece still pending is the “revoke-all” requirement, the rule that a revocation made in response to one type of message applies to all future calls and texts from that company, for any purpose. The FCC delayed this piece once already, from April 2025 to April 11, 2026, then delayed it again on January 6, 2026, this time to January 31, 2027, citing continued operational challenges for companies coordinating revocations across multiple business units and systems.

While a majority of the rule is enforceable now, companies should treat the additional runway on revoke-all as time to prepare, not time to wait.

FAQs

1. What is the TCPA consent revocation rule?

It’s the FCC’s February 2024 update to the TCPA that strengthens consumers’ ability to revoke consent to robocalls and robotexts. It requires businesses to honor a revocation made through any reasonable method, process those requests within 10 business days, and — once the delayed “revoke-all” provision takes effect on January 31, 2027 — treat a single revocation as covering all future communications from that company, regardless of purpose.

2. What are the acceptable methods to revoke TCPA consent?

Consumers can revoke consent verbally over the phone, by replying to a text with a standard keyword like “STOP” or “UNSUBSCRIBE,” by email, by written letter or web form, or by any other method that clearly communicates their intent to stop being contacted. See the “How to revoke TCPA consent” section above for details on each.

3. Can anyone revoke TCPA consent?

Yes, under the TCPA, any adult person who has previously provided consent to be contacted has the right to revoke TCPA consent at any time and by any reasonable means. If a consumer no longer wishes to receive calls or texts from a business, they can inform the business of their decision to revoke consent, and the business must honor this request.

This applies to all types of calls and texts governed by the TCPA, including telemarketing, automated calls, prerecorded messages, and texts sent using an automated system.

Overall, TCPA consent is not permanent, and consumers retain the right to withdraw it at any time, which is a crucial part of the act’s consumer protection measures.

4. Does verbal cease and desist revoke TCPA consent?

Yes, a verbal cease and desist can revoke TCPA consent—but the details matter.

Both the FCC and multiple federal court decisions have confirmed that consumers can revoke TCPA consent through any reasonable means, including verbal statements. That means a consumer telling a caller to stop calling—whether live or through voicemail—can revoke previously given consent to be contacted under the TCPA.

Notably, there is no requirement that consent revocation be in writing, unless the original consent agreement explicitly requires it (which is uncommon and often legally contested). Court rulings such as Gager v. Dell Financial Services and the D.C. Circuit’s decision in ACA International v. FCC reinforce this principle.

While verbal revocation is valid, it poses a proof challenge, particularly for businesses. Unlike emails or written requests, a verbal cease and desist may be hard to verify after the fact—especially if the call wasn’t recorded or documented. This opens up potential liability if a consumer claims they revoked consent and the business has no evidence to show otherwise.

Therefore, a verbal cease and desist could revoke TCPA consent—but businesses must take steps to recognize, record, and honor those revocations to remain compliant. On the consumer side, using clear language like “I revoke my consent to be contacted” can help eliminate ambiguity and trigger proper action.

In summary

The FCC’s revocation of consent rule has already reshaped how businesses need to process DNC requests and respond to a consumer’s “stop.” Most of it has been enforceable since April 2025, with the last major piece, the revoke-all requirement, now delayed to January 31, 2027. It’s a move toward clearer consumer rights, and it requires businesses to adapt swiftly to respect customer preferences while mitigating potential legal repercussions.

According to ActiveProspect’s Director of Privacy, Security, and Compliance, Benjamin Farrar, “It’s an opportunity to take a look at your business models and see where you could improve, provide more transparency, and think from the consumer.”

Organizations will likely need to pivot, crafting clear and comprehensive opt-out instructions while ensuring all systems are calibrated to meet these new standards. It’s a significant change, but one that ultimately benefits the transparency and respect between businesses and consumers.

DISCLAIMER: This page and all related links are provided for general informational and educational purposes only and are not legal advice. ActiveProspect does not warrant or guarantee this information will provide you with legal protection or compliance. Please consult with your legal counsel for legal and compliance advice. You are responsible for using any ActiveProspect Services in a legally compliant manner pursuant to ActiveProspect’s Terms of Service. Any quotes contained herein belong to the person(s) quoted and do not necessarily represent the views and/or opinions of ActiveProspect.

Stay in the loop! Subscribe to the recAP email list to get our latest updates and insights.